Account and Data Deletion
Last updated: 2026-05-28 (effective 2026-05-28)
This page explains how to delete your TCGNotify account and associated personal data. It is provided as a standalone, login-free resource in line with Apple App Store Review Guideline 5.1.1(v).
You can request deletion at any time, free of charge, directly within the App, or by email if you cannot access the App.
1. Delete your account in the App
The fastest way to delete your account is from within the App:
Open the TCGNotify App.
Go to Settings → Data & Privacy → Delete my account.
Confirm the deletion when prompted.
Once confirmed, your account is immediately deactivated and scheduled for permanent deletion.
2. Export your data before deleting
Before you delete, you can export a copy of your data. In the App, choose the data-export option to download a ZIP archive containing your collection, wishlist, purchases, notes, and related records. We recommend exporting first, because deletion is permanent and cannot be undone after the grace period.
3. The 30-day grace period and permanent deletion
When you request deletion, we use a 30-day soft-delete grace period. During this window your account is deactivated, and you may be able to cancel the deletion by contacting us.
After 30 days, your data is permanently and irreversibly deleted from our active systems through cascading deletion across the database and associated stored images.
4. If you cannot access the App
If you can no longer access the App, you can request deletion by emailing privacy@tcgnotify.com from the email address associated with your account, with the subject line "Account deletion request".
To protect your account, we may need to verify your identity before processing the request. We aim to respond within 30 days and to complete verified deletions promptly thereafter.
5. What is deleted and what is retained
Deleted: your profile, email and authentication identifiers, collection and copies, receipt and scan images, machine-learning embeddings derived from your images, wishlist, purchases and portfolio data, notes, social links, and device push tokens.
Retained: a limited set of immutable security and audit-log records (which may include IP address, user-agent, and event timestamps) may be retained for up to 7 years (the link to your identity is irreversibly anonymised after your account is deleted) where necessary for security and to meet legal obligations. Where the law requires us to keep certain records, we keep only what is required and for no longer than necessary.